This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft File: R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json) Hash identifier: ipzjuMHl0ACdrVa1rD7BgSkTM6iUsPqmU9mH3i1EEjw= Subject key identifier: 29:67:4B:CA:42:84:38:08:4F:7B:36:99:36:3C:03:B7:C2:3A:14:02 Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68 Certificate issuer: /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068 Certificate serial: 019AFB4332247CD655883BD3D5F8830F3D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft Manifest number: 1766 Signing time: Mon 08 Dec 2025 00:01:16 +0000 Manifest this update: Mon 08 Dec 2025 00:01:16 +0000 Manifest next update: Tue 09 Dec 2025 00:01:16 +0000 Files and hashes: 1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: UhZNsThNLzJUnTn9NTjClNJ13sMHb6eRiecmPOO9KWQ=) 2: eUJqNeMrOG92tkRoE1eKe7bdKA0.roa (hash: ZH26TI2Lx95OhTyG7ufuoqyGvbD2mq8daN9NRoWVAZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:32:24:7c:d6:55:88:3b:d3:d5:f8:83:0f:3d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068 Validity Not Before: Dec 8 00:01:16 2025 GMT Not After : Dec 9 00:01:16 2025 GMT Subject: CN=29674bca428438084f7b3699363c03b7c23a1402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:33:f1:d5:4c:fd:9f:5f:7d:63:13:d4:87: c4:f3:17:fd:d7:45:7d:db:83:ce:b8:be:9d:6a:76: e5:cd:fb:56:f2:d9:34:92:58:b0:4a:b4:04:df:5c: 66:ed:09:72:95:5e:ae:95:8c:a5:e1:f5:85:2b:c7: 9e:57:a5:49:75:84:07:ef:de:26:7d:e1:84:3c:c5: 88:49:9c:cf:91:0d:fd:d4:b9:0e:6a:92:24:c1:03: 5e:d2:c4:93:f6:ea:9d:ce:44:d7:a6:7f:60:1a:1b: 17:0a:11:a8:26:49:f6:f7:7c:3a:89:d7:21:98:30: 18:c3:37:44:ac:36:84:3a:08:e2:c2:49:7c:0d:57: 98:ac:f9:2d:35:b5:e2:a1:a5:26:c0:37:7a:15:67: 51:f4:1f:6e:17:3a:63:0c:4f:9e:ec:8a:38:5d:e1: fa:3f:b8:6c:19:06:cb:b0:bd:53:33:c4:4d:b8:7e: df:66:a4:59:5a:53:84:f1:1c:c7:13:02:7c:89:51: ad:db:00:ea:43:c3:74:a4:e1:79:41:0f:b0:cc:1b: fc:80:99:de:7d:0d:fb:b0:cc:07:5b:5c:c5:7d:76: 95:03:e1:e3:14:c6:4d:75:f9:0c:23:5f:be:56:6b: 1a:ef:80:ee:28:43:9c:dd:7c:1d:47:a2:a4:1e:05: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:67:4B:CA:42:84:38:08:4F:7B:36:99:36:3C:03:B7:C2:3A:14:02 X509v3 Authority Key Identifier: keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6a:3c:a5:66:d9:59:ad:8b:b9:92:e8:82:06:67:f7:ff:ca: 63:84:99:dd:65:50:b6:5f:f9:fe:41:4e:da:46:f8:f3:a2:53: 70:93:1e:eb:a5:1f:a6:1c:5e:05:d6:f8:d9:00:2a:cc:22:65: cb:d7:f2:11:51:c3:43:62:7c:95:f2:6e:2f:28:4b:c8:43:76: 10:bc:6a:df:ac:0c:77:1f:57:fe:f6:77:96:e9:48:65:0f:12: b0:d1:74:df:46:73:dd:cc:0d:03:41:aa:1c:6c:04:86:6c:1c: f8:4e:2a:52:f6:e5:22:58:87:a0:dc:b6:90:25:b6:a9:96:db: 3e:1e:62:75:8b:31:7b:54:b4:19:64:ab:43:63:4e:5b:92:e4: af:55:72:1f:fb:45:00:62:a1:47:d7:c1:92:fd:22:06:a2:19: c5:89:ad:b1:eb:52:89:ed:27:73:c6:d2:61:4d:64:2b:18:0f: 56:6f:4a:fb:21:eb:a3:fc:0c:54:0b:21:35:0f:b8:7c:f5:c1: 1e:67:cc:ee:68:48:e3:33:22:b8:42:f7:a5:05:d7:29:08:43: a0:d7:76:75:b9:76:14:a5:3b:7d:46:8e:9d:70:17:54:ff:42: 71:63:cc:96:be:20:1b:cf:8e:ae:cc:f8:f4:a0:54:af:4a:7e: e3:34:b9:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QzIkfNZViDvT1fiDDz1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Yjc3MGVhYzhhNzM2M2Y0Y2I4YTg4YzJlMzZlMmQ2OTRi MzkwNjgwHhcNMjUxMjA4MDAwMTE2WhcNMjUxMjA5MDAwMTE2WjAzMTEwLwYDVQQD EygyOTY3NGJjYTQyODQzODA4NGY3YjM2OTkzNjNjMDNiN2MyM2ExNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kcz8dVM/Z9ffWMT1IfE8xf910V9 24POuL6danblzftW8tk0kliwSrQE31xm7QlylV6ulYyl4fWFK8eeV6VJdYQH794m feGEPMWISZzPkQ391LkOapIkwQNe0sST9uqdzkTXpn9gGhsXChGoJkn293w6idch mDAYwzdErDaEOgjiwkl8DVeYrPktNbXioaUmwDd6FWdR9B9uFzpjDE+e7Io4XeH6 P7hsGQbLsL1TM8RNuH7fZqRZWlOE8RzHEwJ8iVGt2wDqQ8N0pOF5QQ+wzBv8gJne fQ37sMwHW1zFfXaVA+HjFMZNdfkMI1++Vmsa74DuKEOc3XwdR6KkHgWhOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClnS8pChDgIT3s2mTY8A7fCOhQCMB8GA1UdIwQY MBaAFEe3cOrIpzY/TLiojC424taUs5BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAt ZjdjNTM5ZmM2MDE4LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAtZjdjNTM5ZmM2MDE4 LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWo8pWbZ Wa2LuZLoggZn9//KY4SZ3WVQtl/5/kFO2kb486JTcJMe66UfphxeBdb42QAqzCJl y9fyEVHDQ2J8lfJuLyhLyEN2ELxq36wMdx9X/vZ3lulIZQ8SsNF030Zz3cwNA0Gq HGwEhmwc+E4qUvblIliHoNy2kCW2qZbbPh5idYsxe1S0GWSrQ2NOW5Lkr1VyH/tF AGKhR9fBkv0iBqIZxYmtsetSie0nc8bSYU1kKxgPVm9K+yHro/wMVAshNQ+4fPXB HmfM7mhI4zMiuEL3pQXXKQhDoNd2dbl2FKU7fUaOnXAXVP9CcWPMlr4gG8+Orsz4 9KBUr0p+4zS53Q== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:47 2025 by rpki-client